Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/1-FNmVeRVF7ImXSWt_OhyTwJnV5o.roa
File: 1-FNmVeRVF7ImXSWt_OhyTwJnV5o.roa (raw, json)
Hash identifier: tEse2zlNg8gl8bqb54aY6bjYFT0WwjXNkfr166Stlvw=
Subject key identifier: F8:53:66:55:E4:55:17:B2:26:5D:25:AD:FC:E8:72:4F:02:67:57:9A
Certificate issuer: /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial: 018AF0AD6BA24D84CCA795402E0DCD16D45C
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/1-FNmVeRVF7ImXSWt_OhyTwJnV5o.roa
Signing time: Mon 02 Oct 2023 13:56:51 +0000
ROA not before: Mon 02 Oct 2023 13:56:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199775
IP address blocks: 185.95.108.0/22 maxlen: 24
185.6.152.0/22 maxlen: 24
185.182.52.0/22 maxlen: 24
185.242.218.0/24 maxlen: 24
185.208.240.0/22 maxlen: 22
185.168.132.0/23 maxlen: 24
185.168.135.0/24 maxlen: 24
185.168.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:ad:6b:a2:4d:84:cc:a7:95:40:2e:0d:cd:16:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Validity
Not Before: Oct 2 13:56:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8536655e45517b2265d25adfce8724f0267579a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:43:22:27:9f:85:be:e2:75:90:7c:4a:b4:
c2:98:bb:e8:95:17:4e:d7:67:60:33:fc:a7:f6:c8:
98:0d:dc:df:70:c2:e4:fc:03:9d:d8:5c:d1:75:8e:
f5:55:52:6b:b6:96:f7:0f:20:3a:ab:68:11:49:7b:
0c:29:26:3c:6c:14:b6:8f:ab:d8:b3:1c:6d:e7:12:
e4:96:a4:74:d1:b3:be:80:f3:1c:f2:1a:c4:c7:cd:
e1:c3:d2:80:cb:8f:e5:5b:6b:c2:16:16:85:5d:49:
59:83:b8:56:44:fd:2a:a4:9d:91:ee:79:c0:41:6f:
ae:0d:b0:3b:d3:92:c0:5c:4c:f7:6c:17:c1:46:7b:
34:17:c0:3d:5b:be:c4:70:42:8a:cc:13:cc:86:c1:
30:7f:ed:21:a7:5f:e4:40:db:d9:e4:03:57:7c:11:
5e:e9:b5:4d:be:0e:0f:b8:8e:e1:c8:4b:26:f1:de:
3a:19:8a:39:15:f8:40:70:d2:a3:2a:70:8c:ec:37:
ed:ab:f4:1f:4a:c1:d5:1b:41:93:c2:24:98:f6:c0:
01:92:34:66:d1:f9:44:61:b3:69:fb:e5:f4:82:9b:
5f:c4:df:67:61:8c:5e:bc:60:d1:7b:8d:30:e1:07:
9e:6a:34:2f:b4:4f:5f:71:ae:e2:eb:20:9b:96:5f:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:66:55:E4:55:17:B2:26:5D:25:AD:FC:E8:72:4F:02:67:57:9A
X509v3 Authority Key Identifier:
keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/1-FNmVeRVF7ImXSWt_OhyTwJnV5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.152.0/22
185.95.108.0/22
185.168.132.0/22
185.182.52.0/22
185.208.240.0/22
185.242.218.0/24
Signature Algorithm: sha256WithRSAEncryption
71:44:23:6b:a6:0f:60:7d:d5:23:bd:1c:8d:54:fe:7c:67:8d:
a6:c5:e8:b8:bb:7f:d9:a8:47:f8:c3:a7:c6:11:6e:6b:03:3d:
08:1a:0e:48:42:43:bd:db:ec:e6:4c:6a:88:73:0b:a8:8e:d8:
28:bc:4c:a4:c4:f8:a2:bb:fd:19:2e:97:3a:7b:67:94:32:89:
4e:a4:84:2a:8c:50:b1:4a:bf:b3:ed:8c:75:b5:6a:86:68:d3:
74:0c:fb:43:43:0a:27:e9:6f:bc:85:6f:93:3b:9f:b2:f4:d0:
07:f4:bb:be:33:b6:03:a2:49:9c:94:bd:a7:55:66:4e:56:a5:
20:ab:84:06:85:b8:56:79:84:ee:5e:f0:1a:b3:a6:e0:09:03:
72:bb:f8:77:0d:f6:53:d3:06:e0:16:88:95:f7:de:84:2a:9d:
40:8e:04:71:f8:4e:e8:b7:d6:12:c7:65:b8:ec:09:ae:3c:1f:
67:6a:c4:e8:d9:47:ec:ee:46:af:14:a8:54:cb:09:cc:21:ef:
c2:25:3f:69:0c:7c:61:95:46:17:88:d0:fb:1e:f6:c7:2b:ef:
00:36:04:cb:24:c2:f1:5b:ec:ac:8d:b3:d9:c3:5d:31:5a:3c:
47:3a:42:09:e9:bc:b7:45:20:6d:2d:37:f4:25:84:23:5b:db:
b4:15:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 13:03:11 2023 by rpki-client on console-ams.rpki-client.org